General

  • Target

    d08be1f191f01833fe290d45efede4d0N.exe

  • Size

    2.2MB

  • MD5

    d08be1f191f01833fe290d45efede4d0

  • SHA1

    bae91fbc38f163fcf2008ed4947ca2f6e93a8de2

  • SHA256

    0b36fe32d6bc72685fcda5ecb8c1cf4780393fde73dd62bc39d0d94c5beb7a0c

  • SHA512

    8f5e75c00998831e14b3c554d9c22acc249ddcd6d0e7d1c67ebc725075facaf4c6b58a5c4978a1b8a1732675a74259224de049c113c3ac500b53defb43ef0020

  • SSDEEP

    24576:0UzNkyrbtjbGixCOPKH2I1iIWILtfOIJ+HKodCHPC0cF3u7P1+eWQ8f/x52vHNZm:0UzeyQMS4DqodCnoe+iitjWwwi

Score
10/10

Malware Config

Extracted

Family

pony

C2

http://don.service-master.eu/gate.php

Attributes
  • payload_url

    http://don.service-master.eu/shit.exe

Signatures

  • Pony family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d08be1f191f01833fe290d45efede4d0N.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections